CVE-2007-2029 : File descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote

File descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service via a crafted PDF file.

Published 2007-04-30 22:19:00

Updated 2017-07-29 01:31:11

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2007-2029

Clam Anti-virus » Clamav » Version: 0.84 Rc2
cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*
Matching versions
When used together with: Debian » Debian Linux » Version: 3.1
When used together with: Debian » Debian Linux » Version: 3.1 Alpha Edition
When used together with: Debian » Debian Linux » Version: 3.1 Amd64 Edition
When used together with: Debian » Debian Linux » Version: 3.1 ARM Edition
When used together with: Debian » Debian Linux » Version: 3.1 Hppa Edition
When used together with: Debian » Debian Linux » Version: 3.1 Ia-32 Edition
When used together with: Debian » Debian Linux » Version: 3.1 Ia-64 Edition
When used together with: Debian » Debian Linux » Version: 3.1 M68k Edition
When used together with: Debian » Debian Linux » Version: 3.1 Mips Edition
When used together with: Debian » Debian Linux » Version: 3.1 Mipsel Edition
When used together with: Debian » Debian Linux » Version: 3.1 PPC Edition
When used together with: Debian » Debian Linux » Version: 3.1 S-390 Edition
When used together with: Debian » Debian Linux » Version: 3.1 Sparc Edition
When used together with: Debian » Debian Linux » Version: 4.0
When used together with: Debian » Debian Linux » Version: 4.0 Alpha Edition
When used together with: Debian » Debian Linux » Version: 4.0 Amd64 Edition
When used together with: Debian » Debian Linux » Version: 4.0 ARM Edition
When used together with: Debian » Debian Linux » Version: 4.0 Hppa Edition
When used together with: Debian » Debian Linux » Version: 4.0 Ia-32 Edition
When used together with: Debian » Debian Linux » Version: 4.0 Ia-64 Edition
When used together with: Debian » Debian Linux » Version: 4.0 M68k Edition
When used together with: Debian » Debian Linux » Version: 4.0 Mips Edition
When used together with: Debian » Debian Linux » Version: 4.0 Mipsel Edition
When used together with: Debian » Debian Linux » Version: 4.0 Powerpc Edition
When used together with: Debian » Debian Linux » Version: 4.0 S-390 Edition
When used together with: Debian » Debian Linux » Version: 4.0 Sparc Edition

Exploit prediction scoring system (EPSS) score for CVE-2007-2029

EPSS FAQ

12.25%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 96 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-2029

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

CWE ids for CVE-2007-2029

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-2029

http://www.mandriva.com/security/advisories?name=MDKSA-2007:098

Mandriva

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/34083

Clam AntiVirus PDF handler denial of service CVE-2007-2029 Vulnerability Report
http://www.debian.org/security/2007/dsa-1281

[SECURITY] [DSA 1281-1] New clamav packages fix several vulnerabilities
Patch;Vendor Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/23656

Patch

Jump to

Vulnerability Details : CVE-2007-2029

Products affected by CVE-2007-2029

Exploit prediction scoring system (EPSS) score for CVE-2007-2029

CVSS scores for CVE-2007-2029

CWE ids for CVE-2007-2029

References for CVE-2007-2029